Mostly cron jobs and lifecycle rules in my experience, it’s rarely clean. S3 lifecycle policies handle the easy stuff but anything touching multiple systems usually ends up as a scheduled job that someone wrote once and nobody fully trusts.
Do you think customers trust it either? I'm trying to differentiate between "good enough" and when enterprise customers actually care. I mean, it doesn't matter until a customer asks for their data.